3.3 Configuring Cloud DNS. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   After creating a zone in Cloud DNS and importing records, what is the final step to complete a DNS migration?

   • ADelete the old zone from the external provider before updating name servers
   • BCreate a new private zone for the domain
   • CDisable DNSSEC on Cloud DNS
   • DUpdate the registrar's name server records to point to the Cloud DNS name servers
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the purpose of cross-project DNS binding in Cloud DNS?

   • ATo make a public zone visible to the internet
   • BTo allow a private zone in one project to be used by VPC networks in another project
   • CTo migrate DNS records between projects
   • DTo encrypt DNS queries between projects
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is migrating a large DNS zone with thousands of records from a legacy provider to Cloud DNS. They have exported the zone file and want to import it. They are concerned about the TTL values in the exported file being too low, which could cause a spike in queries after the migration. What should they do to manage TTLs during the migration?

   • AImport the zone as-is and rely on Cloud DNS to automatically adjust TTLs.
   • BSet all TTLs to 0 during the migration to ensure quick propagation.
   • CKeep the TTLs as they are and update the NS records immediately to minimize downtime.
   • DIncrease the TTL values in the exported zone file before importing, then gradually lower them after the migration.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of enabling DNSSEC on a Cloud DNS zone?

   • ATo hide DNS records from unauthorized users
   • BTo authenticate DNS responses and prevent spoofing
   • CTo encrypt DNS queries between clients and the DNS server
   • DTo speed up DNS resolution by caching responses
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company has a public zone for example.com with an A record for www pointing to a primary web server. They want to add a failover record so that if the primary server becomes unhealthy, traffic is automatically redirected to a backup server. What must they configure in addition to the routing policy?

   • AA health check that monitors the primary server's endpoint, and attach it to the primary record in the failover policy.
   • BA CNAME record that points to the backup server and a geolocation rule for the backup region.
   • CA DNS server policy that forwards queries to the backup server when the primary is down.
   • DA second A record with a lower TTL so that resolvers pick up the change faster.
   Reveal Solution Discussion Select an answer first